What is CVE-2022-3273?

CVE-2022-3273 is a vulnerability that allows the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb prior to version 2.5.0a4.

How severe is CVE-2022-3273?

CVE-2022-3273 has a severity value of 9.8 (critical).

Which software versions are affected by CVE-2022-3273?

CVE-2022-3273 affects versions up to and including 2.4.10, 2.5.0-alpha1, 2.5.0-alpha2, and 2.5.0-alpha3 of Ikus-soft Rdiffweb.

How can I fix CVE-2022-3273?

To fix CVE-2022-3273, update your Ikus-soft Rdiffweb installation to version 2.5.0a4 or later.

Vulnerability/
CVE-2022-3273

critical

9.8

CWE

326 770

6/10/2022

3/8/2024

CVE-2022-3273: Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Q: More information on CVE-2022-3273?

For more information on CVE-2022-3273, you can refer to the following references: [GitHub Commit](https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8) and [Huntr Bounty](https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6).

First published: Thu Oct 06 2022(Updated: )

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

Credit: security@huntr.dev

Affected Software	Affected Version	How to fix
Ikus-soft Rdiffweb	<=2.4.10
Ikus-soft Rdiffweb	=2.5.0-alpha1
Ikus-soft Rdiffweb	=2.5.0-alpha2
Ikus-soft Rdiffweb	=2.5.0-alpha3

Remedy

https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8

Remedy

https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2022-3273?
CVE-2022-3273 is a vulnerability that allows the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb prior to version 2.5.0a4.
How severe is CVE-2022-3273?
CVE-2022-3273 has a severity value of 9.8 (critical).
Which software versions are affected by CVE-2022-3273?
CVE-2022-3273 affects versions up to and including 2.4.10, 2.5.0-alpha1, 2.5.0-alpha2, and 2.5.0-alpha3 of Ikus-soft Rdiffweb.
How can I fix CVE-2022-3273?
To fix CVE-2022-3273, update your Ikus-soft Rdiffweb installation to version 2.5.0a4 or later.
More information on CVE-2022-3273?
For more information on CVE-2022-3273, you can refer to the following references: [GitHub Commit](https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8) and [Huntr Bounty](https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6).

collector/nvd-index
agent/type
agent/references
agent/remedy
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/title
agent/severity
agent/weakness
agent/last-modified-date
agent/tags
agent/event
agent/first-publish-date
agent/description
vendor/ikus-soft
canonical/ikus-soft rdiffweb
version/ikus-soft rdiffweb/2.4.10
version/ikus-soft rdiffweb/2.5.0-alpha1
version/ikus-soft rdiffweb/2.5.0-alpha2
version/ikus-soft rdiffweb/2.5.0-alpha3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.